SonicWALL SRA 1200/4200 manual Setting Your NetExtender Address Range, 192.168.200.100 to

Page 18

Setting Your NetExtender Address Range

The NetExtender IP range defines the IP address pool from which addresses will be assigned to remote users during NetExtender sessions. The range needs to be large enough to accommodate the maximum number of concurrent NetExtender users you wish to support.

The range should fall within the same subnet as the interface to which the SonicWALL SRA appliance is connected, and in cases where there are other hosts on the same segment as the SonicWALL SRA appliance, it must not overlap or collide with any assigned addresses. You can determine the correct subnet based on your network scenario selection:

Scenario A

Use the default NetExtender range:

 

192.168.200.100 to 192.168.200.200

 

 

Scenario B

Select a range that falls within your existing DMZ

 

subnet. For example, if your DMZ uses the

 

192.168.50.0/24 subnet, and you want to support up

 

to 30 concurrent NetExtender sessions, you could

 

use 192.168.50.220 to 192.168.50.249, providing

 

they are not already in use.

 

 

Scenario C

Select a range that falls within your existing LAN

 

subnet. For example, if your LAN uses the

 

192.168.168.0/24 subnet, and you want to support up

 

to 10 concurrent NetExtender sessions, you could

 

use 192.168.168.240 to 192.168.168.249, providing

 

they are not already in use.

 

 

To set your NetExtender address range in the management interface:

1.Navigate to the NetExtender > Client Settings page.

2.Enter an address range for your clients in the Client Address Range Begin and Client Address Range End fields.

Scenario A

192.168.200.100 to 192.168.200.200

 

(default range)

Scenario B

An unused range within your DMZ subnet

Scenario C

An unused range within your LAN subnet

If you do not have enough available addresses to support your desired number of concurrent NetExtender users, you may use a new subnet for NetExtender. This condition may occur if your existing DMZ or LAN is configured in NAT mode with a small subnet space, such as 255.255.255.224, or more commonly if your DMZ or LAN is configured in Transparent mode and you have a limited number of public addresses from your ISP. In either case, you may assign a new, unallocated IP range to NetExtender (such as 192.168.10.100 to 192.168.10.200) and configure a route to this range on your gateway appliance.

For example, if your current Transparent range is 67.115.118.75 through 67.115.118.80, and you wish to support 50 concurrent NetExtender clients, configure your SRA X0 interface with an available IP address in the Transparent range, such as 67.115.118.80, and configure your NetExtender range as 192.168.10.100 to 192.168.10.200. Then, on your gateway device, configure a static route to 192.168.10.0/255.255.255.0 using 67.115.118.80.

SonicWALL SRA 1200/4200 Getting Started Guide Page 17

Page 17 Page 19
Image 18
Page 17 Page 19
Contents Getting Started Guide Document Contents SonicWALL SRA 1200/4200 Getting Started Guide2 Document Contents Setting Up Your Network This SectionPackage Contents for the SonicWALL SRA SRA 1200 System RequirementsMissing Items? SRA 4200 System Requirements Network Configuration Information Recording Configuration InformationAdministrator Information What You Need to BeginSelecting a Deployment Scenario Scenario OverviewsScenario B SRA on an Existing DMZ Applying Power to the SonicWALL SRA Accessing the Management InterfaceTroubleshooting Connecting Your Appliance Configuring Your SRA 1200/4200 Setting Your Administrator PasswordSetting the Time Zone Adding a Local UserNavigate to Users Local Users Configuring the X0 IP Address for Scenario B and Scenario C Configuring SRA Network SettingsConfiguring DNS / Wins Click AcceptConfiguring a Default Route Adding a NetExtender Client Route Navigate to the NetExtender Client RoutesSetting Your NetExtender Address Range 192.168.200.100 toConnecting Your SRA 1200/4200 Scenario a Connecting Your Network InterfacesScenario B Connecting Your Network Interfaces Scenario C Connecting Your Network Interfaces20 Connecting Your SRA 1200/4200 Registering Your Appliance Before You Register Creating a MySonicWALL AccountRegistering Your SonicWALL SRA Product RegistrationServices and Licensing Service ManagementActivating Services and Software Flexible Per-User LicensingTrying or Purchasing Services 26 Services and Licensing Network Configuration Scenario a SRA on a New DMZConnecting to a SonicWALL Security Appliance Adding a New SRA Custom ZoneUn-select the Allow Interface Trust checkbox Enter a name for the service Allowing a WAN SRA ConnectionEnter your Subnet Mask Allowing an SRA LAN Connection Navigate to the Network Address ObjectsClick Name for NetExtender Scenario B SRA on an Existing DMZ PrerequisitesAllowing WAN DMZ Connection Allowing DMZ LAN Connection Continue to Testing Your Remote Connection on Configuring SRA LAN Connectivity Scenario C SRA on the LANName Name for NetExtender Zone Assignment Setting Public Server Access Select the Public Server Wizard option and click NextSelect Http and Https checkboxes, and click Next Testing Your Remote Connection Verifying a User Connection from the Internet40 Testing Your Remote Connection Upgrading Your Appliance Exporting a Copy of Your Configuration Settings Obtaining the Latest SRA SSL VPN ImageUploaded Firmware with Factory Defaults New Uploading a New SRA SSL VPN ImageUploaded Firmware New Resetting the Appliance Using SafeMode Support and Training Options Customer Support Knowledge BaseUser Forums Training Related Documentation SonicWALL Live Product Demos SonicWALL Secure Wireless Network Integrated Solutions Guide Page Safety and Regulatory Information Lithium Battery Warning Cable ConnectionsWeitere Hinweise zur Montage Hinweis zur LithiumbatterieKabelverbindungen Declaration of Conformity Complies with EN 55022 Class a and CISPR22 Class aBmsi Statement Class a Regulatory Information for Korea SWL-1RK23-088Copyright Notice TrademarksSonicWALL SRA 1200/4200 Getting Started Guide 60 Notes SonicWALL, Inc
Top Page Image Contents